Frequency
3
occurrences
First Seen
August 20, 2026
Last Seen
August 21, 2026
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—
Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A critical vulnerability in N-able Passportal’s browser extensions for Chrome and Microsoft Edge has been identified, allowing malicious websites or iframes to access an organization's password vault, including live two-factor authentication codes. This flaw, tracked as CVE-2026-15580, has a CVSS v4...
A vulnerability in N-able's Passportal password manager allows any malicious website to gain complete access to user credentials for up to 100 days. The issue, identified by Bay Area Labs, stems from the browser extension's failure to validate the origin of messages, enabling attackers to exploit ac...
Public Exploits
Checking GitHub for proof-of-concept code…
